SERVER-WEBAPP Jenkins CLI arbitrary Java object deserialization attempt

IPS-NPA

1 SID: 51961

Description

Detects an attempt to exploit CVE-2016-9299, and CVE-2017-1000353, an unsafe deserialization flaw that can allow code execution in Jenkins CLI arbitrary Java object.

CVEs

CVE-2016-9299 CVE-2017-1000353

Related blogs

npm Stealer Reads Its C2 From an Ethereum Contract

August 4, 20265 min read

References

jenkins.io
jenkins.io